CVE-2018-17173

This Metasploit module exploits a command injection vulnerability in LG SuperSign EZ CMS via improper parameter handling in the `getThumbnail` endpoint. It sends a crafted GET request with a reverse shell payload encoded in the `sourceUri` parameter.

This exploit targets CVE-2018-17173 in LG SuperSign EZ CMS 2.5, leveraging improper parameter handling to achieve remote code execution via command injection in the `sourceUri` parameter. It spawns a reverse shell to the attacker's specified IP and port.